← All advisories

High severity7.5NVD Advisory· Published Sep 1, 2022· Updated Jun 17, 2026

CVE-2022-36671

CVE-2022-36671

Description

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

Affected products

2

Xxyopen/Novel Plus
cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*
Novel Plus/novel-plusllm-fuzzy
Range: =3.6.2

Patches

Vulnerability mechanics

References

1

www.mesec.cn/archives/291nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.